SW
Product
Sap Web Application Server
11
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Sap Web Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-2421 | – | May 23 | Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote… Affected: 7.0 |
| CVE-2007-3615 | – | Jul 6 | Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of… Affected: 6.10; 6.20; 6.40; 7.0; 7.0.10 |
| CVE-2006-6010 | – | Nov 21 | SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different… Affected: All versions, or not specified |
| CVE-2006-6011 | – | Nov 21 | Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to… Affected: 6.40 |
| CVE-2006-5784 | – | Nov 7 | Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted… Affected: 6.40; 7.00 |
| CVE-2006-5785 | – | Nov 7 | Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash)… Affected: 6.40; 7.00 |
| CVE-2006-1039 | – | Mar 7 | SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or… Affected: 6.10; 6.20; 6.40 |
| CVE-2005-3634 | – | Nov 16 | frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close… Affected: 6.10; 6.20; 6.40; 7.0 |
| CVE-2005-3636 | – | Nov 16 | Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages Affected: 6.10 |
| CVE-2005-3635 | – | Nov 16 | Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the… Affected: 6.10; 6.20; 6.40; 7.0 |
| CVE-2005-3633 | – | Nov 16 | HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the… Affected: 6.10; 6.20; 6.40; 7.0 |
Showing 11